Comment #3 on issue 4168 by [email protected]: Array.of/from use %AddElement unsafely
https://code.google.com/p/v8/issues/detail?id=4168

Oh, I see:

d8> function y() { Object.defineProperty(this, '0', {value: 1, configurable: false, writable: false}); }
undefined
d8> Array.of.call(y, [5])
{0: 1, length: 1}

Spec-wise, we're supposed to throw since CreateDataProperty returned false. However, we silently swallow the error. This isn't a safety issue though. But I'm still reading the code...

--
You received this message because this project is configured to send all issue notifications to this address.
You may adjust your notification preferences at:
https://code.google.com/hosting/settings

--
--
v8-dev mailing list
[email protected]
http://groups.google.com/group/v8-dev
--- You received this message because you are subscribed to the Google Groups "v8-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to